Azure Storage Account Keys Listed by a Non-Automation Identity
Detects successful retrieval of storage account access keys by a user identity rather than an established deployment or backup service.
Sigma

Detects successful retrieval of storage account access keys by a user identity rather than an established deployment or backup service.

Already have an account?